Charley Cunningham 47aa1f3b6a Reject request_user_input outside Plan/Pair (#9955) ...

## Context

Previous work in https://github.com/openai/codex/pull/9560 only rejected
`request_user_input` in Execute and Custom modes. Since then, additional
modes
(e.g., Code) were added, so the guard should be mode-agnostic.

## What changed

- Switch the handler to an allowlist: only Plan and PairProgramming are
allowed
- Return the same error for any other mode (including Code)
- Add a Code-mode rejection test alongside the existing Execute/Custom
tests

## Why

This prevents `request_user_input` from being used in modes where it is
not
intended, even as new modes are introduced.

2026-01-26 17:12:17 -08:00

..

agent

feat: explorer collab (#9918)

2026-01-26 16:21:42 +00:00

auth

add generated jsonschema for config.toml (#8956)

2026-01-13 10:22:51 -08:00

bin

add generated jsonschema for config.toml (#8956)

2026-01-13 10:22:51 -08:00

command_safety

fix(core): require approval for force delete on Windows (#8590)

2026-01-20 15:25:27 -08:00

config

Add MCP server scopes config and use it as fallback for OAuth login (#9647)

2026-01-26 14:13:04 -08:00

config_loader

Fix up config disabled err msg (#9916)

2026-01-26 17:49:31 +00:00

context_manager

feat(core) update Personality on turn (#9644)

2026-01-22 12:04:23 -08:00

features

add generated jsonschema for config.toml (#8956)

2026-01-13 10:22:51 -08:00

instructions

Support end_turn flag (#9698)

2026-01-22 17:27:48 +00:00

mcp

Add composer config and shared menu surface helpers (#9891)

2026-01-26 23:16:29 +00:00

models_manager

chore(core) move model_instructions_template config (#9871)

2026-01-26 07:02:11 +00:00

rollout

Add thread/unarchive to restore archived rollouts (#9843)

2026-01-26 11:24:36 -08:00

sandboxing

feat: introduce ExternalSandbox policy (#8290)

2025-12-18 17:02:03 -08:00

skills

still load skills (#9700)

2026-01-23 20:35:50 +00:00

state

feat: dynamic tools injection (#9539)

2026-01-26 10:06:44 +00:00

tasks

chore: update interrupt message (#9925)

2026-01-26 19:07:54 +00:00

tools

Reject request_user_input outside Plan/Pair (#9955)

2026-01-26 17:12:17 -08:00

unified_exec

fix unified_exec::tests::unified_exec_timeouts to use a more unique match value (#9414)

2026-01-17 09:05:53 -08:00

api_bridge.rs

fix(codex-api): treat invalid_prompt as non-retryable (#9400)

2026-01-16 22:22:08 -08:00

apply_patch.rs

fix: implement 'Allow this session' for apply_patch approvals (#8451)

2026-01-07 20:11:12 +00:00

auth.rs

[connectors] Support connectors part 1 - App server & MCP (#9667)

2026-01-22 16:48:43 -08:00

bash.rs

chore: use some raw strings to reduce quoting (#9745)

2026-01-22 22:38:10 -08:00

client_common.rs

feat(personality) introduce model_personality config (#9459)

2026-01-20 11:06:14 -08:00

client.rs

Aligned feature stage names with public feature maturity stages (#9929)

2026-01-26 11:43:36 -08:00

codex_delegate.rs

feat: dynamic tools injection (#9539)

2026-01-26 10:06:44 +00:00

codex_thread.rs

feat: ephemeral threads (#9765)

2026-01-24 14:57:40 +00:00

codex.rs

feat: disable collab at max depth (#9899)

2026-01-26 17:05:36 +00:00

compact_remote.rs

feat(core) update Personality on turn (#9644)

2026-01-22 12:04:23 -08:00

compact.rs

feat(core) update Personality on turn (#9644)

2026-01-22 12:04:23 -08:00

connectors.rs

[connectors] Support connectors part 1 - App server & MCP (#9667)

2026-01-22 16:48:43 -08:00

custom_prompts.rs

fix(core): load custom prompts from symlinked Markdown files (#3643)

2025-11-04 17:44:02 -08:00

default_client.rs

Revert "feat: support proxy for ws connection" (#9693)

2026-01-22 15:57:18 +00:00

env.rs

[device-auth] When headless environment is detected, show device login flow instead. (#8756)

2026-01-08 21:48:30 -08:00

environment_context.rs

Support end_turn flag (#9698)

2026-01-22 17:27:48 +00:00

error.rs

feat: max threads config (#9483)

2026-01-21 09:39:11 +00:00

event_mapping.rs

Support end_turn flag (#9698)

2026-01-22 17:27:48 +00:00

exec_env.rs

fix: preserve core env vars on Windows (#8897)

2026-01-08 10:36:36 -08:00

exec_policy.rs

Load untrusted rules (#9791)

2026-01-23 21:52:27 +00:00

exec.rs

fix: memory leak issue (#9543)

2026-01-20 20:14:14 +00:00

features.rs

Aligned feature stage names with public feature maturity stages (#9929)

2026-01-26 11:43:36 -08:00

flags.rs

chore: drop unused values from env_flags (#4188)

2025-09-24 14:29:51 -07:00

function_tool.rs

nit: drop unused function call error (#8903)

2026-01-08 15:07:30 +00:00

git_info.rs

feat: intercept apply_patch for unified_exec (#7446)

2025-12-02 17:54:02 +00:00

landlock.rs

chore: rework tools execution workflow (#5278)

2025-10-20 20:57:37 +01:00

lib.rs

Add thread/unarchive to restore archived rollouts (#9843)

2026-01-26 11:24:36 -08:00

mcp_connection_manager.rs

Add MCP server scopes config and use it as fallback for OAuth login (#9647)

2026-01-26 14:13:04 -08:00

mcp_tool_call.rs

chore: add mcp call metric (#8973)

2026-01-09 13:09:21 +00:00

message_history.rs

chore: unify conversation with thread name (#8830)

2026-01-07 17:04:53 +00:00

model_provider_info.rs

add generated jsonschema for config.toml (#8956)

2026-01-13 10:22:51 -08:00

otel_init.rs

fix(app-server): set originator header from initialize (re-revert) (#8988)

2026-01-09 12:09:30 -08:00

parse_command.rs

[CODEX-4427] improve parsed commands (#8933)

2026-01-13 16:59:33 -08:00

path_utils.rs

Fixed symlink support for config.toml (#9445)

2026-01-18 19:22:28 -08:00

powershell.rs

feat(windows) start powershell in utf-8 mode (#7902)

2025-12-22 09:36:44 -08:00

project_doc.rs

Rename hierarchical_agents to child_agents_md (#9215)

2026-01-14 19:14:24 +00:00

review_format.rs

feat: detached review (#7292)

2025-11-28 11:34:57 +00:00

review_prompts.rs

chore: review everywhere (#7444)

2025-12-02 11:26:27 +00:00

safety.rs

fix: implement 'Allow this session' for apply_patch approvals (#8451)

2026-01-07 20:11:12 +00:00

seatbelt_base_policy.sbpl

feat: update sandbox policy to allow TTY (#7580)

2025-12-04 17:58:58 +00:00

seatbelt_network_policy.sbpl

core: widen sandbox to allow certificate ops when network is enabled (#5980)

2025-11-06 12:47:20 -08:00

seatbelt.rs

feat: add support for read-only bind mounts in the linux sandbox (#9112)

2026-01-14 08:30:46 -08:00

session_prefix.rs

fix: prevent repeating interrupted turns (#9043)

2026-01-20 13:07:28 -08:00

shell_snapshot.rs

Fix flakey shell snapshot test (#9919)

2026-01-26 18:05:30 +00:00

shell.rs

feat: async shell snapshot (#9600)

2026-01-21 10:41:13 +00:00

spawn.rs

feat: detach non-tty childs (#9477)

2026-01-19 11:35:34 +00:00

stream_events_utils.rs

nit: drop unused function call error (#8903)

2026-01-08 15:07:30 +00:00

terminal.rs

[codex-tui] exit when terminal is dumb (#9293)

2026-01-20 16:17:38 -08:00

text_encoding.rs

Fix: Improve text encoding for shell output in VSCode preview (#6178) (#6182)

2025-11-20 11:04:11 -08:00

thread_manager.rs

feat: dynamic tools injection (#9539)

2026-01-26 10:06:44 +00:00

token_data.rs

[connectors] Support connectors part 1 - App server & MCP (#9667)

2026-01-22 16:48:43 -08:00

truncate.rs

Override truncation policy at model info level (#8856)

2026-01-07 13:06:20 -08:00

turn_diff_tracker.rs

chore: more clippy rules 2 (#4057)

2025-09-22 17:16:02 +00:00

user_notification.rs

feat: include cwd in notify payload (#5415)

2025-10-20 23:53:03 +00:00

user_shell_command.rs

Support end_turn flag (#9698)

2026-01-22 17:27:48 +00:00

util.rs

Attach more tags to feedback submissions (#8688)

2026-01-02 16:51:03 -08:00

windows_sandbox.rs

Elevated sandbox NUX (#8789)

2026-01-08 16:23:06 -08:00